XPT SoftwareAustralia PTY Ltd, incorporated in ****, is a Software Services companyXPT works with topclients across Australia in Banking, Insurance, Telecom,Retail, Energy, Mining and Manufacturingdomains.We have 120+technocrats in Australia working at our clientlocations.XPT SoftwareAustralia is part of group companies which has globalpresence across India & Europe.We have served100+ clients globally, fulfilling their onsite-offshoreneeds.Role SummaryWe are seeking anexperienced GRC Consultant – Cyber Lead to drive governance and maturityof non-OS vulnerability management across enterprise application andplatform environments.This role focuses on cyberrisk oversight, exception management, and vulnerability treatment strategy,ensuring risks are effectively assessed, governed, and aligned with enterprisesecurity standards—while remediation execution remains with delivery teams.Key ResponsibilitiesGovernance & Risk OversightDefine and implement non-OS vulnerability management frameworks,policies, and standardsEstablish governance forums, escalation paths, anddecision-making processesEnsure compliance with regulatory, audit,



and enterprisesecurity requirementsException & Treatment ManagementManage remediation exceptions and risk acceptance lifecycleValidate compensating controls and residual risksDrive risk-based treatment plans with application andplatform teamsPerform risk assessments for vulnerabilities that cannot beremediatedEnable risk-based decision-making aligned to business riskappetiteEnsure proper documentation, tracking, and periodic review ofaccepted risksTooling & Capability UpliftLead tooling strategy, evaluation, and automation initiativesImprove vulnerability management maturity and processesSupport training and adoption across delivery teamsSecurity Improvement & SDLC IntegrationOversee remediation outcomes from pen tests, audits, andassessmentsPromote secure-by-design and DevSecOps practicesEnsure vulnerabilities are identified and treated beforeproduction releaseStakeholder ManagementCollaborate with Cyber, Application, Infrastructure, andOperations teamsProvide risk insights to senior leadership and governance forumsInfluence prioritization based on risk severity and businessimpactRequired Skills & ExperienceStrong background in GRC, cyber risk, and vulnerabilitymanagementExperience with application/platform vulnerabilities (non-OS)Knowledge of frameworks: ISO *****, NIST, CISHands-on exposure to tools like Qualys, Tenable, Snyk, orsimilarExpertise in risk assessment, exception management, andcomplianceStrong stakeholder engagement and communication skillsFamiliarity with DevSecOps / SDLC security practicesQualificationsBachelor's degree in IT / Cybersecurity or related field
#J-*****-Ljbffr

📌 Grc Consultant - Cyber Lead (Melbourne)
🏢 XPT Software
📍 Melbourne